nowsecure discovers galaxy vulnerability